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ABSTRACT 


Petri  nets  are  presented  as  a  tecnnique  for  representing 
computer  systems  navlng  asynchronous ,  concurrent  operations. 
Tne  structure  of  tne  nets  are  analyzed  as  a  means  of 
demonstrating  tne  correctness  of  tne  modeled  system.  Tne 
execution  of  tne  petri  net  is  considered  as  a  stochastic 
process*  allowing  analysis  of  tne  model  as  a  queueing 
network  system  by  transforming  tne  petri  net  into  its 
stocnastic  equivalent  net.  It  is  snown  tnat  product  form 
solutions  for  tne  state  probabilities  exist  for  tne  class  of 
state  macnine  decomposable  nets  but  not  for  tne  more  general 
class  of  consistent  petri  nets.  Solutions  for  tne 
corresponding  open  systems  are  derived  by  extending  tne 
petri  net  model  to  include  arbitrary  sources  and  sinks. 
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I.  INTRODOCTION 

With  tne  explosion  In  numbers  and  types  of  computer 
hardware  components  witnessed  In  the  past  few  years, 
computer  system  design  has  become  an  extremely  complex  task. 
Cox  has  observed  [lj  : 

"Today's  computers  are  among  the  most  complex  man  made 
systems  In  existence  today.  The  development  of  such 
systems  represents  a  significant  commitment  of  physical 
and  mental  resources.  This  cost  can  only  be  Justified  if 
these  computing  devices  serve  their  intended  purpose  — 
the  efficient  processing  of  data  in  response  to  specific 
needs." 

If  we  are  to  make  effective  use  of  these  development 
resources,  it  is  necessary  to  provide  the  system  designer 
with  tools  which  allow  him  or  her  to  create  and  analyze 
sophisticated  system  designs. 

Several  trends  have  emerged  which  have  accelerated  the 
search  for  new  and  better  design  tools.  The  low  cost  of  LSI 
and  VLSI  hardware  components  coupled  with  technological 
advances  in  digital  communications  has  led  to  the  evolution 
of  a  wide  variety  of  multiprocessor  systems,  distributed 
computing  applications,  and  computer  networks.  As  early  as 
1976,  Anderson  and  Jenson  [2J  Identified  27  different 
networking  schemes  being  used  in  prototype  or  actual 
systems.  Vhen  one  considers  the  number  of  communication 
protocols  and  transmission  media  which  have  been  proposed  or 
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implemented,  tne  number  of  variables  involved  in  tne 
Hardware  design  process  becomes  truly  awesome. 

Likewise,  innovations  in  system  software  nave  given  rise 

to  such  concepts  as  distributed  operating  systems,  on-line 

data  bases,  and  Interactive  programming,  to  name  a  few. 

Kobayashl  and  Connelm  [3j  nave  noted  tnat : 

"With  the  increasing  complexity  and  sophistication  of 
computer  communication  systems,  modeling  and  performance 
evaluation  [emphasis  their'sj  are  becoming  critical 
fssues  in  the  design  and  operation  of  such  systems.  It 
is  apparent  that  for  a  cost-effective  design  we  must  be 
equipped  with  systematic  methods  of  predicting 
quantitative  relations  between  system  resource 
parameters,  system  workloads,  and  measures  of  system 
performance." 

Several  characteristics  of  these  systems  may  be 
identified  which  determine  what  types  of  models  are 
appropriate  for  performance  evaluation,  A  central  concept  is 
that  of  concurrent  or  parallel  processing.  Each  node  in  a 
network,  or  processor  in  a  multiprocessing  system,  is 
capable  of  independent  computation.  At  the  same  time,  system 
or  global  resources  such  as  memory  and  communication  links 
must  be  shared  by  the  various  processing  elements.  Tnis 
results  in  enforced  cooperation  between  otherwise 
independent  processes. 

Since  most  resources  in  computing  systems  tend  to  be 
scarce  In  relation  to  the  demands  on  them,  contention  exists 
between  resource  users  which  must  be  arbitrated.  This 
problem  is  complicated  by  the  observation  that  demands  in 
computer  systems  are  not  constant.  For  example,  in  computer 
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communication  networks  empirical  evidence  snows  that  demands 
teid  to  be  bursty  and  sporadic.  As  a  result,  resource 
demands  must  be  viewed  as  stochastic  in  nature  and  system 
models  must  be  capable  of  expressing  tne  probabilistic 
elements  of  tne  modeled  system. 

The  uncertainty  in  resource  demand  results  in  two 
phenomena  which  must  be  considered  in  performance  modeline. 
Tne  first  is  tne  creation  of  queues  of  users  whicn  require 
service  but  must  wait  for  resource  availability.  The  second, 
and  interrelated,  phenomenon  is  the  delay  which  users 
experience  while  waiting  for  resources  and  while  being 
served.  The  field  of  queueing  theory  has  attempted  to  answer 
tnese  questions  and  others  concerning  tne  probabilistic 
properties  of  systems  in  both  analytic  and  simulation 
models. 

One  purpose  of  performance  prediction  modeling  is  to 
analyze  system  designs  in  terms  of  performance  measures  or 
indices.  Ferrari  [4j  has  identified  three  performance  index 
classes:  productivity,  responsiveness,  and  utilization.  A 
number  of  specific  measurements  may  be  computed  from  the 
model  to  express  tnese  indices  —  throughput ,  waiting  time, 
and  utilization  for  example. 

A  second  purpose  of  performance  modeling  is  to  verify 
proper  system  operation.  It  is  Important  to  ensure  tnat  the 
underlying  system  is  deadlock-free,  or  at  least  to  predict 
tne  circumstances  under  which  deadlock  could  occur.  In 
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addition,  It  may  be  necessary  to  demonstrate  that  the  system 
enforces  syncnronltatlon  or  mutual  exclusion  among  elements 
of  the  system. 

It  Is  not  sufficient  for  a  model  to  be  capable  of 
providing  answers  to  these  questions.  The  model  must  also  be 
amenable  to  validation;  that  is,  the  determination  of  how 
accurately  the  predicted  results  conform  to  tne  modeled 
system.  This  may  be  particularly  difficult  to  accomplish 
when  the  actual  system  does  not  exist  or  Is  otherwise  not 
available.  Finally,  it  Is  desirable  tnat  the  model  be  robust 
in  order  tnat  its  domain  of  validity  extend  over  as  large  a 
range  of  systems  as  possible. 

Performance  models  can  be  divided  Into  two  separate 
types  —  simulation  and  analytical,  A  simulation  may  take 
various  forms;  nowever,  the  form  most  often  associated  with 
performance  modeline  Is  computer  based,  discrete  event 
simulation.  This  model  consists  of  a  program  which  describes 
the  state  of  the  modeled  system  In  terms  of  system  entitles 
and  their  attributes  at  each  point  in  time.  Attributes  are 
varied  as  a  result  of  tne  instantaneous  occurrence  of  events 
la  the  system.  The  model  then  tracks  the  changes  in 
attributes  over  time  to  determine  the  required  performance 
measures.  Simulations  suffer  from  several  shortcomings.  To 
accurately  model  the  system,  the  programs  must  be  complex 
resulting  In  a  significant  software  engineering  problem;  the 
model  must  be  carefully  designed  and  verified  to  ensure 


proper  operation.  Because  of  tne  probabilistic  nature  of  tne 
system,  It  Is  necessary  to  operate  the  simulation  for 
numerous  runs  and  over  a  large  span  of  simuatlon  time  to 
ensure  statistically  meaningful  results.  This  can  lead  to 
significant  computing  costs  for  the  simulation.  Finally,  If 
tne  system  parameters  are  to  be  changed,  or  elements  of  tne 
system  altered.  It  Is  necessary  to  change  the  simulation  and 
rerun  It.  Once  again,  tne  costs  of  software  modification  and 
model  operation  must  be  met.  This  can  maice  It  difficult  to 
generalize  or  abstract  from  the  simulation. 

An  alternative  to  simulation  modeling  Is  analytic 
modeling.  In  this  method  the  system  Is  expressed  as  a  set  of 
mathematical  equations.  Determining  the  performance  measures 
for  the  system  amounts  to  finding  the  appropriate  solutions 
to  tne  system  equations.  Unfortunately,  In  many  cases  the 
solutions  are  mathematically  Intractable  or  computationally 
Inefficient  and  require  that  simplifying  assumptions  be  made 
about  the  system.  However,  to  quote  from  Kob&yashi  and 
Konhelm  once  again: 

"Even  when  a  decision  Is  made  for  simulation,  an 
analytic  solution,  however  crude  It  may  be,  can  serve  as 
a  guideline  In  narrowing  down  a  range  of  system 
configurations  and  parameters  under  which  a  simulation 
runs.  It  also  could  save  a  considerable  amount  of 
modeling  efforts,  by  detecting  possible  errors 
Introduced  In  the  design  and  implementation  phases  of  a 
simulation." 

This  thesis  investigates  an  approach  to  the  analytic 
modeling  of  computer  systems  based  on  using  a 
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graph-tneoretic  technique  —  petrl  nets  —  as  a 
representation  for  system  elements  and  tneir  interactions. 
By  analyzing  tne  structure  of  a  petrl  net  model,  it  is 
possible  to  answer  a  number  of  questions  regarding  tne 
operation  of  tne  modeled  system.  We  snow  that  it  is  possible 
to  model  tne  stocnastic  nature  of  computer  systems  by 
extending  tne  petri  net  model  to  allow  nondeterminism  in  the 
net  to  be  expressed  in  terms  of  probability  distributions. 
It  is  then  possible  to  consider  a  petri  net  as  an  analog  to 
a  queueing  network  system  and  therefore  it  is  possible  to 
apply  the  known  methods  of  Markov  analysis  to  tne  nets  to 
obtain  analytic  solutions  for  the  system.  The  problem  we 
address  in  tnis  thesis  is  the  evaluation  of  nondeterminlstic 
and  stochastic  petri  nets  using  queueing  theory  techniques. 
Tne  solutions  which  result  combine  tne  structural  properties 
of  petri  nets  with  the  capability  for  performance 
prediction. 

A.  PETRI  NETS  AS  A  PERFORMANCE  MODEL 

Consider  a  simple  computer  system  consisting  of  two 
cooperating,  concurrent  processes  A  and  B  running  on 
separate  hardware.  Process  A  is  a  producer,  and  process  B  is 
a  consumer  of  data.  It  is  desired  that  a  nandsnake  protocol 
be  Implemented  between  the  two  processes  (see  Figure  1.1). 
How  might  tnis  be  represented? 


One  possibility  is  to  list  the  events  which  must  occur 
during  tne  nandsnake  process.  Using  this  event  list,  we 
could  then  determine  what  conditions  must  be  satisfied  for 
each  event  to  occur,  and  wnat  cnanges  in  the  system  result 
from  that  occurrence.  This  could  be  graphically  displayed  in 
the  following  manner.  Let  the  events  be  represented  by  a 
bar,  and  tne  conditions  by  circles.  For  eacn  event,  draw  a 
directed  arc  from  each  circle  (condition)  which  must  hold 
for  the  event  to  occur  to  the  bar  (event).  Next,  draw  a 
directed  arc  from  the  bar  to  each  circle  (condition)  which 
holds  as  a  result  of  the  occurrence  of  the  event.  Finally, 
determine  tne  initial  state  of  the  system  by  deciding  which 
conditions  initially  hold,  and  place  a  dot  (token)  in  a 
circle  for  each  holding  of  that  condition.  Tne  resulting 
graph  is  shown  in  Figure  1.2. 

This  graph  is  called  the  petri  net  model  of  the 
communication  protocol,  after  C.  A.  Petri  who  first  studied 
them  in  the  1950's  [5] .  Note  that  each  event  may  have  one  or 
more  input  conditions,  and  one  or  more  output  conditions.  In 
the  language  of  petri  nets,  the  events  are  called 
transitions  and  tne  conditions  are  called  places .  The  net 
operates  by  moving  tokens  around  the  net  in  accordance  with 
the  firing  rule,  which  states  that  an  event  may  occur  when 
each  input  place  to  the  event  has  a  token  .assigned  to  it. 
The  transition  fires  by  removing  a  token  from  each  input 
place  and  depositing  one  in  each  output  place.  The  state  of 
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Plrure  1.2  Petri  net  model  of  a  communication  protocol 


each  place  Is  determined  by  the  number  of  tokens  In  it.  The 
system  state,  or  marking.  Is  then  represented  by  a  vector 
whose  elements  are  the  state  of  each  place  In  the  net. 

One  feature  of  the  petrl  net  model  Is  that  the  tokens 
can  represent  either  control  flow  or  data  flow;  tne 
difference  purely  lies  In  now  the  net  Is  Interpreted  by  the 
designer.  This  has  led  to  some  difficulty  In  modeling 
data-dependent  events.  Several  attempts  have  been  made  to 
overcome  this  problem  by  extending  the  definition  to  Include 
specialized  places  such  as  conditional  places,  which  cause 
transitions  to  fire  In  different  ways  depending  on  whether 
or  not  the  condition  place  bolds  a  token.  In  either  case  tne 
token  content  of  tne  conditional  place  Is  not  changed  by  the 
firing,  in  example  of  this  extension  is  tne  Macro  E-Net  Noe 
and  Nutt  have  proposed  [6].  In  a  slightly  different 
extension.  Inhibitor  places  were  added  to  the  net  [7J  which 
prevent  firlne  of  a  transition  when  the  place  holds  a  token. 

A  second  feature  of  petrl  nets  Is  tnat  the  firin*  of 
transitions  Is  inherently  asyncnronous  and  concurrent  —  for 
example  in  Fieure  1.2  the  <process  data>  events  for  both 
processes  can  fire  Independently  of  each  other.  When 
necessary,  the  operation  of  concurrent  processes  can  be 
coordinated  through  the  use  of  multiple  Input  places;  the 
<recelve  message>  event  is  an  example  of  this  type  of 
Interaction. 
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The  basic  petri  net,  as  depicted  here,  does  not  attempt 
to  model  tne  time  required  for  execution.  Extensions  to  the 
theory  which  account  for  execution  times  were  investigated 
by  Ramchandani  [B]  and  others.  This  technique  allows  for 
analysis  of  tne  time-related  operation  of  the  net. 

1.  Analysis  of  petri  nets 

Petri  nets  may  be  analyzed  in  a  number  of  ways.  Much 
of  the  worfc,  particularly  at  MIT,  has  been  based  on  usine 
techniques  from  automata  theory  and  investigating  the  nets 
as  formal  language  generators  [9,  10J .  Using  this  method, 
Hacic  has  proven  a  number  of  decidability  questions  about  the 
possible  configurations  (system  states)  of  the  net.  Other 
worn  [11,12,13]  has  emphasized  the  eraph  theoretical 
properties  of  the  nets  in  analyzing  their  structure.  This 
methodology  has  led  to  the  identification  of  several 
subclasses  of  petri  nets  based  on  special  structural 
characteristics . 

Simulations  Dased  on  petri  net  models  have  been  widely 
used  in  analyzing  hardware  designs  of  concurrent  systems  and 
data  flow  computing.  Typically,  the  system  to  be  modeled  is 
reduced  to  its  petri  net  equivalent  which  then  serves  as 
input  to  the  simulator.  The  simulator  then  executes  the 
petri  net  in  much  the  same  manner  as  a  conventional  discrete 
event  simulation. 
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Petri  nets  nave  been  used  to  model  a  large  number  of 
concurrent  software  and  nardware  systems.  In  hardware 
design*  they  hare  been  used  as  a  basis  for  developing  speed 
independent  logic  [14,15]  by  provine  the  conditions  for 
which  circuits  are  free  of  races  when  operating  in 
fundamental  mode.  More  ambitious  applications  have  Involved 
the  analysis  of  multiprocessor  systems  such  as  the  CDC  6600 
[16,17]  ,  IBM  360/91  [18J  ,  Amdanl  470  V/6  [17],  and  US  Navy 
SEAFIRE  weapons  system  [19].  Most  of  these  applications  have 
involved  simulation  modeling  due  to  tne  complexity  of  the 
designs.  A  slightly  different  approach  to  hardware  design 
has  been  the  design  by  step-wise  refinement  method,  Valette 
[20]  nas  shown  that  single  transitions  could  be  replaced  by 
more  complex  structures  when  certain  conditions  were  met. 
Using  this  method,  each  component  of  the  system  can  be 
separately  analyzed  and  formed  into  an  independent  structure 
he  called  a  well-formed  bloclt.  By  substituting  these  blocts 
for  transitions  in  tne  net,  it  is  possible  to  retain  tne 
properties  of  the  original  net.  This  hierarchical  structure 
also  simplifies  tne  problem  of  understanding  the  operation 
of  the  net.  Figure  1.3  shows  how  this  might  be  accomplished. 

Petri  net  models  have  been  used  in  the  analysis  of 
software  deslrns  as  well.  For  example,  they  have  been  used 
to  verify  the  correctness  of  communication  protocols  [21] . 
Operating  system  synchronization  prlmatives  such  as  P  and  7 


[22]  may  be  modeled  using  simple  net  structures.  Figure  1.4 
gives  an  example  of  now  mutual  exclusion  could  be 
represented.  The  contents  of  place  S  Is  the  semapnore  value 
for  the  protected  resource  (In  this  case  1).  Each  process 
which  requires  exclusive  use  of  tne  resource  nas  an  event 
P(S)  which  may  fire  only  If  the  semaphore  is  non-zero. 
Firing  of  tne  corresponding  P(S)  event  returns  the  token  to 
the  semaphore.  The  significant  advantage  of  using  a  petrl 
net  Is  that  mutual  exclusion  can  be  proven  by  showing  that 
only  one  P(S)  event  can  be  fired  until  tne  corresponding 
V (S )  event  occurs. 

Lest  the  reader  get  the  impression  that  petrl  nets  are 
the  ultimate  modeling  tool.  It  should  be  noted  that  petrl 
nets  nave  limitations  In  tnelr  modeling  ability.  Tne  lack  of 
a  mechanism  for  handling  data  dependent  events  as  described 
earlier  nas  made  it  difficult  to  model  actual  systems  using 
deterministic  nets,  A  second  related  limitation  is  the  use 
of  deterministic  transition  firing  times  in  the  analysis  cf 
timed  nets.  In  our  opinion,  the  restriction  of  petrl  nets  to 
deterministic  modeling  nas  been  responsible  for  the  lack  of 
attention  given  to  tnem  In  recent  years. 

Our  view  of  petrl  nets  empnasises  the  non-deterministic 
modeling  capabilities  of  tne  nets.  We  consider  the 
transitions  in  the  net  to  be  service  centers  which  operate 
according  to  some  service  time  distribution.  In  this 
approach,  tne  places  can  represent  queues  of  tokens  awaiting 
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service.  By  regarding  nets  In  tnls  manner,  tne  Known  results 
of  queueing  networx  tneory  may  be  applied  to  tne  analysis 
while  maintaining  the  benefits  of  tne  underlying  structure 
of  tne  nets.  We  feel  tnat  this  will  result  in  a  better 
modeling  tool  for  analyzing  concurrent  systems. 

B.  REVIEW  OF  RELATED  WORK 

The  basis  for  concurrent  system  modeling  has  largely 
been  derived  fron  two  papers  by  Karp  and  Miller  [24,25]  . 
These  papers  proposed  several  models  for  concurrent  systems. 
Computation  graphs  are  slmular  to  petri  nets  except  that 
places  were  modeled  as  directed  arcs  between  events  and 
labeled  with  a  four-tuple  defined  as: 

A  —  tne  Initial  number  of  words  in  a  FIFO  queue 
U  —  the  number  of  words  added  to  the  queue  as  a  result 
of  tne  firing  of  tne  Input  transition 

W  —  the  number  of  words  removed  from  tne  queue  as  a 
result  of  the  firing  of  the  output  transition 

T  —  a  threshold  number  of  words  (perhaps  greater  than 
W)  required  for  the  output  transition  to  fire. 

Karp  and  Miller  established  the  requirements  for  several 
Important  concepts  including  liveness  and  boundedness  wnicn 
we  discuss  In  greater  detail  later. 

Reiter  [26 J  extended  computation  grapns  by  adding  a 
fifth  element  tau  to  the  directed  arc  labeling  which 
represented  tne  execution  time  required  for  the  output 
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transition  to  process  tne  W  data  words  wnen  firing.  Reiter 
tnen  determined  a  metnod  for  finding  possible  sequences  of 
firings  of  transitions.  For  cyclic  graphs,  he  found  a  lower 
bound  for  tne  cycle  period  of  tne  graph.  Computation  graphs 
have  been  used  in  the  performance  analysis  of  data  flow 
processors  [2?j . 

The  second  paper  by  Harp  and  Miller  [25J  investigated 
parallel  program  schemata  and  vector  addition  systems.  A 
parallel  program  scnema  modeled  parallelism  in  programs  by 
establishing  computation  states  and  rules  for  state 
transitions.  The  concept  of  FORK  and  JOIN  wnich  nave  been 
applied  to  data  flow  and  other  MlMD  architectures  was 
developed  to  express  the  creation  of  concurrent  processes 
from  a  sequential  process,  and  the  combination  of  concurrent 
processes  into  a  sequential  process.  The  equivalence  of 
petrl  nets,  computation  grapns,  and  parallel  program 
schemata  was  shown  by  Miller  [28 J . 

Most  of  the  research  on  petri  nets  in  tne  Unite!  States 
has  been  conducted  at  MIT.  Commoner  and  Holt  [ll,12j  studied 
a  deterministic  subclass  of  petri  nets  Jtnown  as  marked 
graphs  and  proved  several  tneorems  regarding  tneir  system 
state  spaces.  A  more  general  subclass  of  deterministic  nets, 
persistent  nets,  was  studied  by  Iandweoer  and  Robertson  [13J 
who  proved  that  the  theorems  regarding  marked  graphs  were 
applicable  to  this  class.  A  final  deterministic  subclass 
referred  to  as  state  macnine  decomposable  was  investigated 


by  Ramchandanl .  In  addition.  Ramchandanl  analyzed  tnis 
subclass  with  deterministic  transition  firing  times  to 
derive  expressions  for  the  minimum  net  cycle  period  In  a 
manner  analogous  to  that  Reiter  used  f or  computation  graphs. 

Other  classes  of  petrl  nets  have  been  defined  which 
Improve  the  tractablllty  of  tne  problem  of  finding  solutions 
to  performance  measures  while  retaining  characteristics 
which  are  desired  in  the  modeled  systems.  In  particular, 
live,  bounled,  conservative,  and  consistent  nets  nave 
received  the  most  attention.  The  properties  of  these  classes 
will  be  examined  in  detail  In  the  next  section. 

Our  worn  extends  this  previous  wont  by  focusing  on  the 
broader  class  of  nondetermlnlstlc,  consistent  petrl  nets 
which  appears  to  be  the  most  general  class  for  which 
solutions  to  performance  questions  may  be  found.  While 
nondeterminism  Increases  the  difficulty  of  dealing  with 
petrl  nets  analytically,  much  of  tne  previous  work  on  petrl 
net  structure  remains  pertinent  to  this  class. 
Nondeterminism  allows  tne  net  to  represent  different  types 
of  data,  for  example,  by  regarding  tne  data  type  or 
transition  firing  time  as  a  random  variable.  To  analyze  the 
performance  of  nondetermlnlstlc  petrl  nets,  we  consider  tnem 
as  analogs  to  queueing  network  models.  The  basis  for 
analysis  of  these  models  is  the  classic  work  of  Jackson  [29] 
for  tne  case  of  open  systems,  and  Gordon  and  Newell  [30]  for 
closed  systems.  Both  of  these  models  relied  upon  poisson 
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arrival  processes,  first  come,  first  serve  (FCFS)  queueing 
discipline,  and  exponential  service  departure  processes  to 
ensure  tnat  tne  Marfcov  property  was  met  and  allowed  tbe 
system  state  probabilities  to  be  expressed  as  the  product  of 
tne  marginal  state  probabilities.  This  quality  is  Known  as 
the  product  form  solution  and  is  required  for 
computationally  efficient  solutions.  Most  of  the  recent  worir 
in  queuing  network  tneory  nas  attempted  to  find  product  form 
solutions  for  more  general  systems.  Jacicson  (.31]  considered 
systems  wnere  tne  arrival  rates  and  service  rates  were 
functions  of  the  queue  lengths  (states)  at  the  various 
nodes.  Basfcett  et  al.  [32J  extended  this  to  open  and  closed 
networks  where  customers  were  of  different  classes  and  tne 
queueing  discipline  was  FCFS,  no  queueing,  and  last  come, 
first  serve  witn  preemptive  resume  (LCFS-PR).  All  tnese 
cases  were  shown  to  have  product  form  solutions.  In 
addition,  they  showed  that  a  condition  Known  as  local 
balance  was  a  necessary  condition  for  product  form 
solutions . 

Chandy  et  al.  [33J  considered  the  question  of  local 
balance  In  more  detail  and  developed  the  more  general  notion 
of  station  balance  which  was  also  shown  to  be  necessary  and 
sufficient  for  product  form  solutions  if  non-exponential 
differentiable  service  distributions  were  used.  In  addition 
they  proved  that  arbitrary  service  distributions  satisfied 
station  balance  if  processor  sharing  (PS)  or  LCFS-FR 
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disciplines  were  used.  In  tne  case  of  exponential  service 
tine  distributions  for  all  service  classes,  tne/  showed  that 
FCFS  and  priority  disciplines  resulted  In  station  balance 
being  met.  This  result  has  been  extended  to  any  wort 
conserving  discipline. 

In  summary,  It  has  been  shown  that  product  form 
solutions  exist  for  queueing  networks  with  tne  following 
properties : 

1.  For  exponential  service,  any  worJc  conserving  queueing 
discipline  may  be  used. 

2.  For  PS  and  LCFS-PR  disciplines,  any  differentiable 
service  distribution  may  be  used. 

3.  The  solutions  do  not  depend  on  the  routing  used  for 
the  customers. 

C.  OUTLINE  OF  SUCCEEDING  SECTIONS 

In  Section  II,  we  present  the  formal  definitions  of 
petrl  nets  and  derive  several  useful  properties.  The  state 
space  —  the  set  of  system  states  the  net  may  occupy  —  is 
determined  by  constructing  the  reachability  set  of  the  petrl 
net.  The  conditions  under  which  the  state  space  is  finite 
and  recurrent  are  then  considered.  It  is  shown  that  nets 
with  certain  structural  characteristics  give  rise  to  these 
restricted  state  spaces.  In  particular,  the  classes  of 
marked  graphs,  state  machines,  and  consistent  nets  are 
considered  because  of  their  relation  to  realizable  systems. 
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In  Section  III  we  turn  to  nets  witn  timed  events.  Tne 
case  of  deterministic  routine  and  transition  time  is  first 
considered.  Next,  tne  (probabilistic)  class  of  state 
machines  witn  nondetermlnlstlc  routine  and  exponential 
transition  times  Is  examined.  It  Is  shown  that  for  the  class 
of  state  macnine  decomposable  nets  It  is  possible  to 
transform  tne  net  Into  a  stochastic  equivalent  net  which  is 
analogous  to  a  closed  queueing  network.  For  this  class  of 
nets  a  product  form  solution  for  the  state  probabilities  Is 
derived. 

Next,  petrl  nets  which  allow  external  sinks  and  sources 
are  defined.  Again,  it  Is  snown  that  tne  stocnastlc 
equivalent  nets  may  be  analyzed  as  queueing  networks;  in 
this  case  an  open  system. 

Finally,  tne  class  of  consistent  petrl  nets  witn 
exponential  firing  times  is  considered  and  it  Is  shown  tnat 
product  form  does  not  exist  for  this  class  of  nets. 
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II.  PETRI  NET  THEORY 


In  tnis  section  the  relevant  petri  net  tneory  is 
presented.  Much  of  the  worn  follows  tnat  of  Commoner  and 
Holt  [11].  Kraft  and  Miller  [25],  and  Ramcnandanl  [6] .  The 
notation  used  is  primarily  tnat  of  Peterson  [23] . 

The  petri  net  was  defined  informally  in  the  preceding 
section  as  a  means  for  representing  related  events  and  tneir 
conditions  in  systems.  We  now  formalize  this  notion  t»y 
defining  tne  petri  net  N  and  its  directed  graph 
representation. 

Definition  2.1  N  =  <P,T,I.O> 
where 

P  *  {pt-  j  p^  is  a  place  in  tne  net} 

T  *  {tj  !  t;  is  a  ln  tne  net* 

I  :  (P)(T)  — such  tnat  if  pt  is  an  input  place 


t  i* 

*  (Pj  i  0(pj 

)  > 

0}  wnere 

€  T  A  P/  €  P 

and  likewise: 

rPy 

=  {t£  !  0(p j 

)  > 

0} 

Py 

*  i tt'  !  I (py 

* 

)  > 

0>  wnere 

*tf  € 

T  A  Pj  €  P 

Tnese  sets 

are  referred 

to 

as 

the  input 

and 

output  sets. 

respectively 

.  Mote  that  the 

definitions  of 

tne 

functions  I 

and  0  require  that: 

\ftL  €  T, 

•it  t<P  A  *£• 

*<p  A 

•tt*  U  t i* 

»  0 

The  set  of 

places  represents 

tne 

conditions  in 

our  informal 

model,  and  -5 tie  set  of  transitions  represents  tne  events.  Tne 
input  and  output  functions  specify  the  preconditions  for  an 
event  to  occur  and  tne  results  of  tne  event  occurrence. 

Corresponding  to  each  petrl  net  we  define  a  bipartite, 
directed  grapn  as  follows: 

Vpt-  p£  €  P  draw  a  circle  representing  a  place 

Vt<  t£  €T  draw  a  vertical  bar  representing  a  transition 

Vtj  ,py  If  Pj  €  *t£  draw  a  directed  arc  from  pj  to  t* 

Vt *•  ,p j  if  draw  a  directed  arc  from  t^  to  py 

We  will  use  the  notions  of  petrl  net  and  petri  net  graph 
interchangibly  (since  tney  are  equivalent). 

Example  1. 

Consider  tne  following  petri  net  N  *  <P,T,I,0>  with 


P  - 

{ 

P,  * 

P*’  Pj’ 

P« 

»  Py  *  P*  *  P7  ^ 

T  » 

{ 

t,  , 

t* »  t3  , 

h 

,  t5  > 

let 

n 

*  l> 

?|  and  m 

s 

jT^  .  Then  I  and  0  may  be 
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represented  by  tne  n  X  m  incidence  matrices: 
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where  ;,j  *  I(pt-*t j) 

and  C0  i  ,j  *  0(p£  ,t j) 

The  corresponding  petrl  net  grapn  is  shown  in  Figure  2.1. 

If  we  associate  with  each  place  in  a  petrl  net  N  a 

non-negative  integer  marking  function  jU,  ,  we  have  the 

following  definition  of  a  marked  petrl  net  M: 

Definition  2.2  &  marked  petrl  net  M  =  <P,T,I ,0,  JJL> 

where  P,ftI»0  are  defined  as  before  and 
fX:  P  — >N 

Each  function  fj defines  a  marking  of  the  net.  In  graph 

notation  the  petrl  net  eraph  is  extended  to  a  marked  petri 

net  graph  by  adding  tokens  to  places  as  follows: 

Vpt'  €  p*  JjLK(pt)  =  n  *neQ  place  n  tokens  (dots)  on 
place  p4* . 

Figure  2.2  shows  a  possible  marking  for  the  petri  net  of 
Example  1.  Clearly  a  (countably)  infinite  number  of  possible 
markings  exist  for  any  petri  net.  Tnis  marking  represents 
the  (possibly  multiple)  holdings  of  conditions  at 


some  Instant  of  execution  and  may  be  ▼level  as  a  description 
of  the  state  of  tne  net. 

Definition  2.3  A  transition  t  Is  enabled  Iff 

Vp j  Pj  €  **>  /X(py)  ^  KPj.ti) 

For  eacn  marking  fj,K  ve  can  define  tne  enabling  set  SK  as 
follows : 

Definition  2.4  Tne  enabling  set.  SfclG  T  =  {tt-  !  t;  Is 
enabled  by  marking  jj,^} . 

In  our  grapn  notation,  a  transition  Is  enabled  If  eacn  arc 
directed  Into  the  transition  has  a  token  in  Its  originating 
place.  Referring  to  Figure  2.2,  it  will  be  seen  that  t,»  ta, 
and  t*  are  enabled  and  tnerefore  *  {t,  ,  t^.t^  ^ * 

Transition  t^  Is  not  enabled  since  mere  Is  no  token  In 
place  pj.  corresponding  to  tne  arc  p^  — >  t^. 

An  enabled  transition  may  fire  to  create  a  new  marking. 
That  Is,  we  define  a  function: 

Definition  2.5  A  firing  function  for  a  marked  net  M  Is 
P  tJJL  X  s  — >  fX  sucn  tnat  F(|X^Pj),t^)  =  JLL^Pj)  - 

Kpj  .t;)  ♦  o(pj,t4* )  *  LLk„ 

where  Pj  €  P  A  t^S^. 

P  is  defined  for  all  markings  for  wnich  tne  set  SK  is 
non-empty.  Continuing  with  the  vector  notation  introduced 
earlier  for  tne  functions  I  and  0,  we  may  denote  eacn 
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martin*  JX*  as  an  n-element  vector  U*  where  n  =  |p|  and 

U*(i)  *  JX*  ( P £ )  for  1  *  1,2,... ,n  .  Tnen  F  may  be  expressed 

as : 

F  ( Uk , tt* )  =  0K  -  Cji  +  C0*  wnere  Cj  L  and  C0<I  are  tne  1th 
columns  of  the  input  and  output  incidence  matrices 
respectively. 


Definition  2.6  Martin*  jXj  is  directly  reacnable  fromjj.|<if 
( tt-  €  Sk)  A  F(ju,yt;  )  *fXj  and  is  denoted  as: 


Returning  to  our  earlier  example,  transition  tz  may  be  fired 
(recall  that  tne  enabling  set  Sk  *  It,  ,  lz,  t*  }  ).  Ey 
inspection  of  Figure  2.2,  we  specify  tne  vector  for  marlring 
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In  graph  notation,  one  toten  is  removed  from  each  place 
having  an  arc  directed  into  tne  firing  transition,  and  one 
toten  is  added  to  each  place  having  an  arc  directed  from  the 
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firing  transition.  Tne  resulting  marsing  Is  shown  In  Figure 
2.3. 

Next  we  consider  sequences  of  transition  firings.  Assume 
tne  following  firings  exist  for  some  marlred  net  M : 

Tnen  we  denote 

M’*  °r 

wnere  tne  firing  sequence  oris  some  sequence  of  transition 
firings  ( tj  ,  tg* . • . , tn) . 

Definition  2.7  Marking  Is  reacnable  from  marlring  fj.k  iff 

<“>  3  O'!  M-k-Vk.,  'Vk.«  ->  •  •  •  “>Mm 

wnere  O  *  ( t(  »t^j*. . •  * t^,) 

If  we  form  the  reflexive,  transitive  closure  of  tne 
transition  firing  relation  we  nave  tne  following  definition: 

Definition  2.8  Siven  a  marked  net  M,  the  reachability  set 
Q(M)  is  defined  Inductively  as: 
basis:  LL,  €  Q 

ti 

Induction: /JLte  €  OA  3v  €  T  !  *=>  jLL^,€  0 

We  are  Interested  In  determining  the  elements  of  the  set 
0(1).  To  do  so,  we  must  first  formalize  tne  previously 
introduced  vector  notation  as  a  vector  addition  system. 


35 


A.  VECTOR  ADDITION  SYSTEMS 


The  concept  of  vector  addition  systems  was  first 
explored  by  tarp  and  Miller  [25J .  This  section  is  largely 
derived  from  their  worx. 

A  vector  addition  system  is  defined  as  a  pair  V  =  (d,w) 
where  d  is  an  r-dimenslonal  vector  with  i4€N  and  W  is  a 
finite  set  of  r-dimensional  vectors  w(  ,  ....  w„  with 

Wj(i)€I«  The  readability  set  R(V)  for  a  vector  addition 
system  is  the  set  of  vectors  composed  by  adding  elements  of 
the  set  V  to  d.  Tnat  is 

R(V)*{x'x  *  d  +  (w,  ♦  w4  +  . . .  +  w„  )  A  x(i  )tSLe  }. 

In  addition,  the  following  terminology  is  used: 

The  relation  £  is  defined  as 
x  ^  y  <=>  for  i  =  1,2, ...,r  x(l)  ^  y(i) 

The  symbol  CJis  defined  sucn  that  if  n  is  any  integer, 

(*)  >  n  and  n  +  CJ  =CJ. 

The  reachability  set  R(V)  can  be  determined  by  constructing 
tne  corresponding  reachability  tree  T(V).  Nodes  in  tne  tree 
consist  of  r-dimensional  vectors  x,y,zt...  with 
x(i  )€  CAcj) ,  for  i  *  1,2, ...,r  .  The  relation  <,  is  defined 
as  x  •<  y  <*>  a  directed  path  exists  from  x  to  y  in  T(?).  let 
d  be  the  root  of  the  tree.  Descendants  are  constructed 
recursively  as  follows: 

1.  If  x  K  jr  and  x  *  y,  y  is  a  leaf  node. 

2.  Otherwise,  construct  successor  nodes  to  y  with 

vectors  y  ♦  w,  ,  y  +  wa,  ...  ,  y  +  w^  where  for  i  * 


1,2, ...,r  y(l)  +  wj(l)^0.  In  addition,  If  tnere  exists 
a  node  z  such  tnat  z  •<  y  and  z^.y  +  wi  and  z(J)  < 
y(J)  +  w  ( J )  for  some  J,  tnen  y(j)  +  w,;(j)  *GJ. 

To  Illustrate  the  construction  of  this  tree  consider  the 
following  example  from  [25J : 

Example  2. 

Let  ?  *  (d,V)  wnere 
d  =  f 1 , 0 ,0 ,0 , 0] 

W  -  {  [-1,1, 0,0, 0j  ,  [-1,0,0,1,0J  ,  [0,-1 ,2 , 0 , 0j  , 
[0,1, -1,0,0]  ,  [0,0, 0,-1, 2]  ,  [0,0,0, 1,-1]  ) 
Tne  resulting  reachability  tree  is  shown  in  Figure  2.4. 

The  following  theorems  from  [25]  allow  us  to  answer 
decidability  questions  about  rector  addition  systems  by 
Inspecting  the  reachability  tree. 

Theorem  2.1 

Vi  3t  !  7  €  R(f)  A  (x  y)  <=>  z  I  z  6  T  (V)  A  (x  <  z) 

The  proof,  while  straight  foward,  is  rather  lengthy  and  so 
Is  not  Included  here,  but  may  be  found  In  [25] . 

Theorem  2.2  For  any  vector  addition  system  ?,  T(¥)  Is 
finite. 

We  first  show  the  following  two  lemmas: 


1) - (0,0, 2, 0,0) - (0 
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Lemma  2.2.1 

Let  p,  *P**Pa»  ••••Pn*  •••  be  an  infinite  sequence  of 
elements  of  (J\f  U\ui )  *  Then  tnere  exists  an  infinite 
subsequence  P* »Pt »Pe ♦ • • • *Pa » •  •  •  sucn  tnat 

P*^  Pk^Pe^-’  •  •  Pi?»*  *  *  * 

Proof.  Construct  an  infinite  subsequence  by  selecting 
elements  with  first  entries  nondecreasing.  From  tnls 
sequence,  construct  an  Infinite  subsequence  with  second 
entries  nondecreasing,  and  so  on. 

Lemma  2.2.2  (Kdnig  Infinity  Lemma)  Let  T  be  a  tree  such 
tnat  each  vertex  nas  a  finite  number  of  successors  and 
there  exists  no  infinite  directed  path  from  the  root. 
Then  T  is  finite. 

Proof.  Since  eacn  vertex  nas  a  finite  number  of 
successors,  let  n  be  the  maiimum  number  of  successors 
for  any  node.  Then  tnere  are  at  most  n  paths  of  length  1 
from  the  root,  and  if  p  is  some  node  in  the  tree,  there 
are  at  most  n  paths  of  length  1  In  the  subtree  having  p 
as  its  root.  Since  no  infinite  patn  exists  by 
assumption,  let  m  be  tne  maximum  path  length.  Then  the 
maximum  number  of  nodes  is  nm  and  T  is  finite. 

Proof  of  theorem  2.2. 

Assume  tnere  exists  an  infinite  directed  path  from  the 
root  of  T(7)  with  node  sequence  P, »P*»P*» • • • »P„» • • • 
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Tnen  by  lemma  2.2.1,  tnere  exists  a  subsequence 


p, * Pk * p* *  •••*?»•  •••  witp  Pfc~ Pt  —  •  •  •  p*^s-  •  •  •  •  ®y 

definition,  if  p* *  p4  tnen  pb  is  a  leaf  node  and 

therefore  the  inequality  is  strict  and 
P*  <P*  <pt...<pt  <•••  •  Again  by  definition,  since 

P*  <Pk*  Pk  must  have  one  more  entry  equal  to  GJ  than  p*. 
Since  the  number  of  entries  is  finite,  this  is 

Impossible  and  tnerefore  no  sucn  infinite  directed  patn 
exists.  By  lemma  2.2.2,  T(7)  is  finite. 

Using  these  theorems,  it  is  possible  to  prove  tne  following 
decidability  theorems  about  the  reachability  set  R(V): 

Theorem  2.3  Given  some  finite  n£/\f  , 

Vx  i  €  R(7)  A  (x(i)^  n)  is  decidable. 

Proof.  Construct  T(V).  By  tneorem  2.2  T(V)  is  finite. 

Therefore  Vy  y  €T(V)  is  decidable.  By  theorem 

2.1  then,  the  question  is  decidable  for  R(V). 

i. 

Theorem  2.4  Given  some  subset  of  tae  entries  for  tne 
r-  dimensional  vector  addition  system  U,2,...r}, 

Vx  iCN**  3y  y  €  )  A  (Vi  i  €  0)  . 

y(i)  f£x(i)  is  decidable. 

Proof.  By  the  definition  of  T(V),  tnis  property  holds  iff 
there  exists  a  leaf  node  z  such  that  Vi  i£@  x(i)  ®CJ  • 
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Theorem  2.5  Siven  a  vector  addition  system  R(V),  it  is 
decidable  wnetner  R(V)  is  finite. 

This  result  follows  directly  from  theorem  2.4. 

Theorem  2.6  Given  two  vector  addition  systems  V  and  1', 
R(V)J=»R(F')  is  unlecldable. 

Rabin's  proof  for  this  result  appears  in  Balter  [34j . 

It  should  be  noted  that  tne  general  reachability  problem 
i.e.,  given  x<*]\J  is  x€R(F),  is  not  determined  by  the 
reachability  tree.  However,  an  algorithm  for  solving  the 


reachability 

problem  has 

been 

found  [35] . 

Therefore , 

the 

reachability 

problem 

is 

decidable 

(although 

the 

computational 

complexity 

is  not 

Known) . 

This  completes  our  study  of 

vector  addition  systems. 

We 

next  demonstrate  the  correspondence  between  vector  addition 
systems  and  marlced  petrl  nets.  Let  M  *  <P,T,I,OfjJ>  be  an 
arbitrary  marlced  petri  net.  The  corresponding  vector 
addition  system  F(d,W)  may  then  be  constructed  in  the 
following  manner: 

let  the  dimension  r  =  jpj 

let  d  »jLL«  wnerejUL,  is  an  initial  marking  for  M 
let  W  *  (wK  |  t;  €  T,pj  €  P  wR(  J )  =  0(pj  ,tA* )  -  I ( p j  ,  t  j )  > 
Note  tnat  jvj  »  J t{  and  that  elements  of  V  reflect  tne  net 
change  in  marking  resulting  from  the  firing  of  a  transition 
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in  M.  This  leads  to  the  following  tneorem  relating  tne 
reachability  sets  of  M  and  7: 

Theorem  2.7  q(m)  *  R(7) 

Proof.  i).  Q(M).=?R(7).  Let  x€R(M).  Then 

•  By  definition  of  ^  k* 
?(|X  and  substituting  for  t, ,  ta,  t3 *  .... 

t*  in  the  firing  sequence  fJL+  w,  ■*>  w*  +  . . .  w„  *  x 
Since  /JL,*  d  by  definition,  x£R(7)  . 

ii).  Q(m)£=R(7).  Let  x  €R(7).  Then 

x  *  d  ♦  w,  +  *  ...  wn  .By  the  same  reasoning  as  case 

1 ,  ...  ^  i  . 

Using  theorem  2.7  and  the  results  for  vector  addition 
systems  we  state  the  following: 

Tneorem  2.8  Siven  a  marked  petri  net  M  with  initial 
marking^  ,  it  is  decidable  if  the  reachability  set  Q(M) 
is  finite. 

Theorem  2.9  Siven  a  marked  petri  net  M  with  initial 
marking  Jtl^  ,  it  is  decidable  if  tnere  exists  x€.M*  such 
that  for  all  elements  of  the  reachability  set  Q(M) , 
each  entry ]ul(  1  X. 

Definition  2.9  A  marked  petri  net  M  is  X-bounded  iff 

3k  lVj-1  |UL€Q(M)  3*>JJ.(i)~k  . 
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Figure  2.5.  Reachability  tree  for  Example  1 
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Definition  2.10  A  marked  petri  net  M  Is  safe  Iff  It  Is 
k-bounded  with  k  *  1  . 

Ve  complete  this  section  by  once  again  considering  Example 
1.  Define  toe  corresponding  vector  addition  system: 

7  *  (dfV)  with  d  *  [2,1,1,0,0,0,0J  as  Indicated  by 
Firure  2.2. 

¥  »  {  [-1,0, 0,1, 0,0,0]  ,  [-1,-1, 0,1, 1,0,0]  , 

[0,1, -1,0, -1,1,0]  ,  [0,0, -1,0, 0,0,1]  , 

[0,0, 1,0,0, 0,-1]  } 

Next,  construct  tbe  corresponding  reachability  tree  T(7). 
The  tree  Is  shown  In  Figure  2.5.  By  Inspection,  the 
reachability  set  R(V)  Is  determined  to  be: 

{  [2 , 1 , 1 ,0 , 0 , 0  ,0]  ,  [l ,  1 , 1 , 1 , 0 , 0 , 0 J  ,  [l , 0 , 1 , 1 , 1 , 0 , 0]  , 

[2 , 1 , 0 , 0 , 0 , 0 , 1]  ,  [0  , 1 , 1 , 2 , 0 , 0 , 0]  ,  [0 , 0 , 1 , 2 , 1 , 0 , 0  ]  , 

[1,1, 0,1, 0,0,1]  ,  [1,1, 0,1,0, 1,0]  ,  [1,0, 0,1, 1,0,1]  , 

[0,1, 0,2, 0,0,1]  ,  [0,0, 0,2, 1,0,1]  ,  (0,1, 0,2, 0,1,0]  , 

[0,0,0,2,1,1,01  > 

This  (finite)  set  is  also  Q(M)  and  therefore  M  Is  k-bounded 
with  k  *  2. 

B.  SUBCLASSES  OF  MARKED  PETRI  NETS 

The  nets  Investigated  In  the  preceding  parts  of  this 
section  are  more  properly  referred  to  as  generalized  petri 
nets.  Analysis  of  generalized  nets  has  proved  to  be  somewhat 
Intractable.  As  a  result,  several  properties  of  petri  nets 
have  been  studied  which  define  subclasses  of  the  generalized 
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nets.  These  restrictions  appear  to  be  Justified  in  that  many 
(if  not  most)  actual  systems  may  he  modeled  by  the 
restricted  nets. 

Definition  2.11  A  transition  t  T  is  live  for  markingjjL* 
iff 

VjL ~>3ct\  p.9>/x  At,-  €  SK 

where  is  the  enabling  set  forp.^. 

If  a  transition  is  live,  a  firing  sequence  may  always  be 
found  which  will  allow  it  to  be  fired  indefinitely  often. 

Definition  2.12  A  marked  petri  net  M  is  live  iff 
Vt  t€T  ~>  t  is  live  for  marking  ju* 

In  systems,  liveness  is  often  associated  with  the  problem  of 
deadlock.  Hack  [36]  has  shown  that  liveness  is  equivalent  to 
the  reachability  problem;  therefore,  it  is  decidable. 

Definition  2.13  A  place  pt- €  P  is  conflict  free  iff 
V/LLfct,  ,  t* . t„  £  p..  A  t,'€S K  ==> 

3/  J  *  i  A  t;  €  SK 

for  any  marking,  a  conflict  free  place  may  not  enable  more 
than  one  transition.  In  figure  2.6,  place  p,  is  not  conflict 
free  since  both  t,  and  t2  are  enabled. 

Definition  2.14  A  petri  net  M  is  conflict  free  iff 
Vp  p  €P  ■*>  p  is  conflict  free. 
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A  stronger  statement  concerning  places  Is  the  following: 
Definition  2.15  A  place  p  is  decision  free.  Iff 

K[  =  lp‘*|  55  1  • 

Definition  2.15  A  marked  petrl  net  M  is  a  marked  grand  Iff 
Vp  p  $P  ==>  p  Is  decision  free. 

A  final  property  of  petrl  nets  may  be  defined: 

Definition  2.17  A  marking  jxK  is  persistent  Iff 

V)i.t€S  A  (/UL^jU.j,)  *=>  tSS^  V  t6CP 

A  persistent  marking  Is  one  in  vnlcn  an  enabled  transition 
remains  enabled  until  It  Is  fired. 

Definition  2.18  A  petrl  net  M  is  persistent  iff 
Vt  t  €T  **>  t  is  persistent  for/n*. 

Tne  question  of  persistence  Is  Important  in  tne  analysis  of 
petrl  nets  and  therefore  we  present  a  decidability  tbeorem 
for  tnese  nets: 

Theorem  2.10  Given  a  k-bounded,  marked  petrl  net  M,  It  Is 
decidable  whether  M  Is  persistent. 

Proof.  Since  M  is  k-bounded,  Its  reachability  set  Q(M)  is 

finite.  For  each  lu  €  0  construct  the  enabling  set  Sk. 

t; 

For  each  t;  €  SH  determine  Sh„  where  p .k=>/Xk,,  .  If 
2sk  -  {tt-}  ,  M  is  persistent. 
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Note  that  all  conflict  free  nets  (and  taerefore  all  marged 
graphs)  are  persistent.  We  next  consider  some  aspects  of  the 
petri  net  classes  having  these  properties. 

1.  Marlced  graphs 

Mamed  graphs  nave  been  extensively  studied  by 
Commoner  and  Holt,  among  others  [11,12].  Here  we  present 
some  pertinent  results  of  tneir  worn. 

Recall  from  graph  theory  the  following  three 
definitions: 

Definition  2.19  Let  D  *  <A,R>  he  a  digraph  with  nodes  a 
and  b.  A  .directed  patn  from  a  to  b  is  a  finite  sequence 
of  nodes  P  *  (ce ,c  , , . . . ,c„)  such  that  ca  *  a,  c.,  =  b, 
and  for  all  c,-  with  0^-i^.n  ctRct4.,  .  If  a  =  b,  P  is  a 
directed  circuit. 

Definition  2.20  A  digraph  D  =  <A,R>  is  strongly  connected 
if  for  every  two  nodes  a,b$A,  tnere  is  a  directed  path 
from  a  to  b  and  b  to  a.  If  there  is  an  undirected  path 
from  a  to  b,  D  is  connected. 

Definition  2.21  A  component  of  a  digraph  D  is  a  connected 
subdigraph  of  D  which  is  not  a  proper  subdigraph  of  any 
connected  subdigraph  of  D. 

The  constraint  on  the  Input  and  output  transitions  to  a 
place  mages  it  possible  to  replace  every  place  with  a  single 
directed  arc  between  its  input  and  output  transitions.  In 


this  way  the  petri  net  reduces  to  a  digraph  simplifying 
analysis.  The  merited  graph  may  then  be  more  simply  defined 
as: 


Definition  2.22  A  marlced  graph  M'  *  <T',E'tjj.'>  is  a 
three-tuple  where 


T'  *  T 

E'  :  TXT  -->  {0,1> 
where  B < t ^ ftj )  * 
fj.'  :  E'  — where 


if  3p  o(p,t  •) 
A  Kp.tj)  =  i 

otherwise 


»  1 


wnere  e{j-€B  A  «p„  *  it,}  A  p**  *  {tj} 

(Here  we  have  synonymously  defined  the  edge  set 
B'  ■  {e<j}  where  tne  edge  directed  from  node  1  to 


node  J  e«/€E'  Iff  E'(t;,tj)  *  1 


Additionally  define  tne  toiten  count  N  as: 


Definition  2.23  The  toiten  count  of  a  graph  is  a  function 
N  :  P  — >Jvf  where 

If  p£e  then  N(P)  *2Li(et)  for  e,€P 

CM  • 

Figure  2.7  shows  the  graphical  representation  of  a  marked 
graph  where  the  number  of  tokens  on  an  edge  e«j  corresponds 
to  «.’/)•  The  following  theorems  and  proofs  appeared  In 
[UJ: 
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Theorem  2.11  &  marking  fj.'  Is  live  Iff  the  token  count 

N  >  0  for  every  directed  circuit  in  M. 

Proof.  1).  Assume  JJ*'  Is  live  and  N ( B )  *  0  for  some 

directed  circuit  B  and  e.j  Is  an  edge  in  tnat  circuit. 

By  definition,  a  sequence  CT  exists  which  enables  tj  . 
After  firing  fj.' ( e <;  j  )  *  l  and  therefore  N (B )  =  l  in 
contradiction  with  the  assumption. 

11).  Assume  N(B)  >  0  and  tj  Is  a  node  In  directed 

circuit  B.  If  tj  is  enabled,  tj  is  live.  Otherwise  let 

tt*  be  a  node  In  B  such  that  e^j  is  In  B.  If  tj  Is 

enabled,  fire  It  resulting  In  tj  being  enabled.  If  not, 

continue  to  backtrack.  Since  the  path  length  of  B  must 
be  finite  In  the  directed  circuit  beginning  and  ending 
with  tj t  this  procedure  must  halt  and  therefore  tj  is 
live. 

This  leads  Immediately  to  a  corollary: 

Corollary  2.11.1  A  marking  which  is  live  remains  live 
after  firing. 

Theorem  2.12  A  live  marking  Is  safe  iff  every  edge  in  the 

graph  is  in  a  directed  circuit  with  token  count 

N (P )  *  1. 

Proof.  Clearly,  the  token  count  of  any  directed  circuit  Is 
constant.  If  N(P)  *  1  then,  the  edges  of  the  directed 


by  tne  same 


circuit  must  be  safe.  If  N(P)  K  >  l  , 
process  as  in  tneorem  2.11  transitions  in  the  circuit 
may  be  fired  until  it  tokens  appear  on  tne  same  edge. 

Theorem  2.13  For  every  finite,  strongly  connected  grapn  G 
there  exists  a  live  and  safe  marking  for  the 
corresponding  marked  grapn  M'. 

Proof.  By  definition,  each  edee  in  G  must  lie  in  a 
directed  circuit.  Since  G  is  finite,  a  finite  number  of 
directed  circuits  exist.  Therefore  construct  fJ. '  by 
placing  one  token  arbitrarily  on  each  directed  circuit. 
The  conditions  of  theorems  2.11  and  2.12  are  met  and  m' 
is  live  and  safe. 


2.  State  Machine  Decomposable  Nets. 


This  class  of  petri  nets  has  been  studied  by 


Ramcnandani  [9].  A  state  machine  is  defined  as: 


Definition  2.24 


marked  petri 


iff 

V t  t€T  AtHpj.t)  >  0]  A  [I(pj,t)  >  <0j  ==>  p  i  =  p j 
Vt  t^T  A  [o(p  t,t)  >  0J  A  [o(p j,t)  >  aj  =»>  p t-  =  p j 

That  is,  Vt  |  «t|  ■  jt»|  *  1. 


This  restriction  results  in  nets  which  are  functional 
equivalents  of  finite  state  machines,  hence  the  name  state 
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machine.  Note  that  state  macnines  allow  conflict  i.e.. 


nondeterminl sm . 

Definition  2.25  A  subnet  is  a  strongly  connected 

component  of  M. 

Definition  2.25  A  petrl  net  M  Is  state  macnlne 

decomposable  Iff 

}  '  L/p^  *P  A  UTj-  =T  A  M  is  a  state  macnlne. 
Several  properties  of  state  macnines  may  easily  be  snovn. 

Tneorem  2.14  The  token  count  N (M)  Is  constant  for  a  marked 
state  macnlne . 

Proof.  Assume  N(M)  *  C  and  t<€T.  By  definition 
[•t£J  “  Jti*|*  1  .  Let  ip,  >  *»t£  and  {p^>  =  t£«  with 

N(p,  )  *  c,  and  N(p^)  =  ca  .  If  tt-  does  not  fire,  tne 
tolren  count  of  p,  and  p3  are  unaffected  by  t4-.  If  t<; 
does  fire,  by  definition  N(p,)  c,-  1  and  N(p*)  =  l  . 
Summlne  we  nave: 

^N(p)  =  c,  -1  +  c4  +  l  *  c,  *  C-j 
and  the  token  count  does  not  chance. 

Corrolary  2.14.1  Every  marked  state  macnlne  is  bounded. 

Proof.  Since  tne  token  count  N(M)  is  constant,  the  maximum 
number  of  tokens  at  any  place  Is  N(M);  therefore  M  Is 


bounded 


wa 


3.  Consistent  Petri  Nets. 

An  additional  class  of  petrl  nets  are  tnose  for 
which  there  exist  consistent  current  assignments. 

Definition  2.2?  A  petrl  net  M  is  consistent  iff  mere 
exists  a  function  :  T  — >  I  sucn  that 

1.  Vt;£T  C$(tt')  *  (p; 

2.  Vp€P  £<&X  I(p,t  )  a  £<J>X  0(p,tj) 

where  in  the  summation  n  =  ftj  . 

The  function  is  analogous  to  an  electromagnetic  flux  and 
the  <pt's  are  referred  to  as  the  currents  associated  with 
transitions  tt-.  Note  that  part  2  of  the  definition  is  an 
expression  of  lirxhoff's  Law.  Part  2  requires  solving  tne 
following  set  of  linear  equations: 


cr  . » . 

• 

• 

<P, 

Co  i,i . 

• 

<P, 

• 

• 

. 

• 

• 

• 

• 

1 

<kj 

j 

• 

• 

• 

• 

Cq  1 . ■ 

# 

where  Cj.  and  C0  are  the  incidence  matrices  for  M. 
If  a  non-zero  solution  exists,  M  is  consistent. 

Example  3.  Consider  the  net  in  Figure  2.9. 


0  110  0 

1  0  0  0  0 

Construct  CE  * 

1 

0  0  0  1  0 
0  0  0  0  1 
1  0  0  0  0 

c0  * 

0  10  0  0 
0  0  10  0 
0  0  0  1  1 
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Cj  X  C$  = 


0  110 
0  0  0  1 
0  0  0  0 
10  0  0 


c0  x<$= 


10  0 
0  10 
0  0  1 
0  0  0 


0 

0 

0 

1 


0A*<P*  *<£, 

<P,9  2  <?>a=  <3>9*  Cj>4  -  1 


Therefore  M  is  consistent. 


The  significance  of  consistency  is  that  a  consistent  system 
will  cycle  —  given  an  initial  marking  jULc,  there  exists  a 
firing  sequence  such  tnatjLU.  inconsistent  system 

will  either  consume  tokens  and  halt  or  produce  tokens  and 
become  unbounded.  Tnese  results  are  summarized  in  two 
theorems  by  Ramchandanl  [8]. 


Theorem  2.15  A  petri  net  M  is  consistent  iff 

-i  CT 

djJrfCTsuch  tftat  15  a  cycle. 

Proof,  i).  Let  <£,»  (p. . . .  cp^  be  the  consistent  currents  of 
the  transitions  or  M.  Let  /LL^P,)  =  +  <p  +  cp  *C  wnere 

correspond  to  t4*. .  .t„€pt-«  •  Then  let 
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CT*  {t,»tg...}  wnere  the  multiplicity  of  t^  lnCTis 

equal  to  its  current  giving  .  Since  tfte  sum  of 

tne  currents  into  and  out  of  a  place  is  0, 

yiSVi)  *  Jll»  j ( P  £ )  anl  jju,* fXj  .  Therefore  CJis  a  cycle. 

ii).  Let  he  a  cycle.  Then  fJLjp^)  =>|JL.  (p(  )  .  Let 

fc(  ,tz, . . . , be  the  multiplicity  of  transitions 

t,  ,tz,.«  .,t4  £«p4  and  1,  ,l%f  ...«1„  be  the  multiplicity  of 

*  * 

transitions  1 1  fta, •  •  •  9 t„£pc«  .  2)lrj  •  Tnen  let 

<|Xtj  )  *  *;  if  tj^*pt-  andcfKtj)  =  1;  if  tjgp^.*  .  This  Is 

a  consistent  current  assignment  and  therefore  M  is 
consistent . 

Theorem  2.16  A  petri  net  M  with  a  live,  bounded  martin/? 

Is  consistent. 

Proof.  Since  M  is  bounded,  its  reachability  traph  0 ( M )  is 
finite.  Since  M  is  live,  tnere  exists  a  strongly 
connected  subgraph  which  contains  fjL,  .  Therefore,  tnere 
exists  a  directed  circuit  in  the  subgraph  firing  all 
transitions.  This  is  a  cycle  and  therefore  M  is 
consistent. 

We  conclude  our  description  of  petri  net  subclasses  by 
considering  the  hierarchical  relatlonsnips  between  classes. 
In  the  sections  on  marked  graphs  and  state  machines,  it  has 
been  shown  tnat  botn  are  contained  within  toe  class  of 
bounded  petri  nets.  It  is  easy  to  snow  that  the  containment 


57 


r 


is  proper.  Figure  2.9  snows  a  net  wnicn  Is  bounded  but 
neltner  a  marred  graph  nor  a  state  machine.  The  Intersection 
of  the  class  of  marred  grapns  and  state  machines  are  a 
degenerate  class  we  call  sequential  processes.  Theorem  2.16 
showed  that  all  live*  bounded  marred  nets  are  consistent. 
Once  again,  the  containment  Is  proper  —  Figure  2.10  Is  an 
example  of  an  unbounded  non-live  net  which  is  consistent. 
Finally  note  that  all  persistent  or  conflict  free  nets  are 
deterministic  and  therefore  may  be  reduced  to  decision  free 
nets  l.e.,  marred  grapns.  These  relationships  are  summarized 
in  Fleure  2.11. 
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III.  STOCHASTIC  PETRI  NETS 


To  this  point  we  have  analyzed  petri  nets  on  tne  basis 
of  tneir  structural  cnaracteri sties .  To  utilize  petri  nets 
for  computing  performance  measures,  it  is  necessary  to 
Introduce  tne  concepts  of  time  and  nonieterminism  to  tne 
basic  model.  Ve  turn  first  to  tne  question  of  modeling  time 
in  petri  nets. 

4.  TIMED  EVENTS  IN  PETRI  NETS 

4n  important  concept  in  Section  II  was  tne  marking,  or 
system  state,  of  tne  net.  Tne  marking  gives  an  instantaneous 
description  of  tne  token  content  of  eacn  place  in  tne  net. 
Tne  marking  was  cnanged  as  a  result  of  tne  firing  of  a 
transition.  Ve  defined  a  firing  sequence  as  an  allowable 
ordering  of  transition  firings  in  accordance  wltn  the  rules 
for  enabline  transitions.  By  controlling  tne  dynamics  of  tne 
transition  firing  process,  it  is  possible  to  analyze  tne 
cnanges  in  system  state  as  a  function  of  time. 

Several  autnors  nave  addressed  tne  question  of  adding 
timing  considerations  to  petri  nets.  Two  different 
Interpretations  have  resulted  from  tnis  work.  Slfakls  [37J 
has  proposed  that  once  enabled,  transitions  fire 
instantaneously.  4  delay  is  then  Introduced  before  tokens 
are  available  at  the  output  places  for  possible  enablings  cf 
other  transitions.  4n  alternative  view  is  that  taken  by 
Ramchandanl  [9J  and  Zuberek  [38 J .  In  their  models,  once 
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enabled,  transitions  fire  after  a  delay  called  tne  firing 
tine.  After  the  firing  time  Is  completed,  tfte  net  cnanges 
state  by  moving  the  appropriate  toJcens.  These  two 
)  Interpretations  appear  to  be  equivalent.  We  cnoose  to  use 
the  latter  Interpretation  to  conform  to  the  usual  notion  of 
a  queueing  service  center. 

We  first  consider  the  case  where  transition  flrinrs 
occur  at  discrete  time  epocns  *T^,Ta. . . .  , . . .  where  Tn  Is 

the  instant  of  the  nth  firing. 

Definition  3.1  The  system  state  of  a  marked  petrl  net  M  Is 
a  function: 

U:T  — >|X 

where  ^ ^ , . . . , ,  • , . }  , 

V(X> )  =M-o  . 

«d  mr„)  **> 3  !o<r,., ) 

U  is  a  step  function  witn  discontinuities  at  those  Instants 
of  time  in  which  the  system  changes  stats. 

Definition  3.2  Tne  firing  time  I  of  a  petrl  net  Is  a 
function: 

X:T— >R* 

where  €  T  X(tt-  )  «Tt’  *  x 

By  this  definition,  X(  is  tne  time  required  for  a  firing  of 
the  transition  t£. 


63 


By  specifying  the  firing  tine  function  X,  it  is  possible 
to  describe  tff'Tp.  In  tnis  section  we  consider  the  case  where 
the  transition  firing  times  X£  are  constant  for  all 
transitions.  This  restriction  makes  it  possible  to  describe 
a  total  ordering  of  transition  firings  for  persistent  nets. 
In  the  case  of  allowed  conflict  between  transitions,  it  is 
necessary  to  impose  a  priority  scheme  on  transition  firings 
to  resolve  tne  conflict  (that  is.  to  mate  tne  firing 
deterministic).  This  ordering  amounts  to  a  restriction  on 
tne  firing  sequences  wnicn  are  allowed.  Those  sequences  (J 
for  which  the  ordering  holds  are  termined  feasible  firing 
schedules.  Ramchandani  has  shown  that  for  timed  marked 
graphs  and  live,  safe,  and  persistent  petri  nets  a  periodic 
feasible  firing  schedule  exists.  Ee  additionally  derived  an 
upper  bound  on  tne  computation  rate  (cycle  period)  for  state 
machine  decomposable  nets.  The  bound  is  given  by: 
pmax  =  mintp,  p^.p^J 


where  p^  is  the  cycle  time  for  each  circuit  in  tne 
corresponding  net  and  is  given  by: 


pn 


n(c£) 


where  N(C^)  is  tne  token  count  for  circuit  .  xj  is  tne 
sum  of  the  firing  times  for  the  transitions  in  Ct‘  ,  and  C^is 
the  current  associated  with  that  circuit  in  a  minimal 
current  assignment.  Ramchandani  also  argues  that  this 
formula  can  serve  as  a  first  order  approximation  where  tne 


64 


Es*asa:  wxmssur.  im 


mean  firing  times  *xj  are  substituted  for  tne  deterministic 
firing  time  in  tne  formula.  A  slightly  different 
derivation  of  tne  same  result  was  made  by  Ramamoortny  and  Ho 
[39  J . 

B.  MARKOV  ANALYSIS  OF  PETRI  NETS 

Research  Into  the  behavior  of  timed  petrl  nets  to  date 
has  concentrated  on  deterministic  nets  with  constant  firing 
times.  As  noted  In  Section  I,  this  approach  falls  to  account 
for  the  randomness  and  uncertainty  wnicn  cnaracterlze  actual 
systems.  We  propose  that  nondeterminism  be  modeled 
probabilistically  In  tne  net.  Our  metnod  differs  from 
previous  worn  by  emphasizing  the  stochastic  nature  of  the 
system  state  ( marking).  In  this  tray,  It  Is  possible  to  apply 
the  fcnown  methods  of  queueing  theory  to  analyze  tne 
probabilistic  properties  of  these  nets  which  we  call 
stochastic  petrl  nets.  We  introduce  in  this  section  two 
sources  of  nonieterminism  which  will  be  modeled  by  the 
stochastic  petrl  nets  —  random  transition  firing  times  and 
the  probabilistic  firing  of  simultaneously  enabled 
transitions. 

We  first  snow  that  if  the  firing  time  x  for  each 
transition  Is  considered  to  be  a  random  variable  rather  than 
a  deterministic  one,  it  is  possible  to  analyze  the  tohen 
content  of  the  net  as  a  stochastic  process. 
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Definition  3.3  Tfie  firing  time  is  an  Independent, 

identically  distributed,  random  variable  sucn  tnat 
Vti  6  T  Kn  is  t&e  firing  time  for  tne  ntn  firing  of 
transi  tl  on  t4  . 

The  requirement  tnat  TL  is  Independent  and  identically 
distributed  is  necessary  for  our  derivation  of  a  Martov 
cnain  representation  for  tne  net  state  space.  In  tne  case  of 
computer  networks,  Ileinroct  [40]  nas  investigated  this 
requirement  whlcn  he  has  named  the  message  independence 
condition.  Tnis  assumption  is  somewnat  artificial  m  that  it 
implies,  for  example,  that  the  time  required  to  process  the 
sane  message  at  two  nodes  is  independent.  This  difficulty 
notwithstanding,  results  for  an  analysis  of  the  AfiPA  net 
show  some  evidence  for  the  validity  of  this  assumption  [41] . 
Applying  the  metnods  of  probability  tneory,  tne  firing  time 
distribution  may  be  defined  as: 

Definition  3.4  For  all  t4€T,  if  is  tne  firing  time  for 

xi  ♦ 

Si  (x)  *  x] 

In  the  usual  way  we  define  the  density  function: 

Definition  3.5  For  all  transitions  t4  «■  T,  tne  firing  time 
density  function  is  given  by 

s4  ( x )  *  d/ix  [S4(x)J  *  pll4'  *  x] 
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Likewise  define  tbe  moments: 

Definition  3.6  The  nth  moment  of  the  firing  time  density 
function  is  given  by: 

S[Xj  P  =  j  xns^ (x )dx 

and  in  particular  B[XjJ  *  1/p^  is  the  mean  firing 

(service)  time*. 

Tnese  definitions  make  it  possible  to  model  systems  by 

applying  the  appropriate  distributions  to  the  firing  time 

function.  It  is  clear  tnat  tne  feasible  firing  sequences  CT 

for  a  petri  net  are  no  longer  deterministic.  It  is  necessary 

to  consider  how  this  nondeterminism  can  occur  in  the  net. 

Referring  to  Figure  3.1(a),  it  can  be  seen  tnat  transitions 

tg  and  t^  are  both  enabled,  tfith  random  firing  times,  the 

sequences  t2,t<|  and  are  b0*tt  possible.  In  tnis 

instance  the  effect  of  the  nondeterminism  is  unimportant  to 

overall  system  operation  since  the  two  processes  are 

independent  at  this  point.  A  more  interesting  situation  is 

depicted  in  Figure  3.1(b).  The  transitions  t2  ,  t^,  and 

are  In  conflict.  To  analyze  this  type  of  nondeterminism  it 

is  necessary  to  specify  the  branching  probabilities  for  each 

of  the  possible  paths.  There  are  several  possible  ways  this 

may  be  accomplished.  For  example,  each  simultaneously 

*  The  mean  service  rate  fj.  is  an  unfortunate  conflict  in 
notation.  Due  to  its  long  standing  use  in  tne  literature,  we 
will  use  this  notation  pointing  ont  its  meaning  where 
confusion  might  exist  with  tne  earlier  definition  of 
marking. 
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enabled  transition  may  begin  firing  at  once  witn  tne 
transition  whicn  completes  firing  first  causing  tne  martin* 
to  change.  Tne  problem  of  determining  wnlcn  transitions  are 
simultaneously  enabled  is  a  significant  one.  We  can  simplify 
the  problem  by  restricting  our  analysis  to  free  choice 
places. 


Definition  3.7  i  place  p  is  free  cnolce  iff 

|pc.|  =  1  VVtjS*  =s>  "V  *  {pL* 

A  free  choice  place  is  one  which  either  has  a  unique  output 
transition  or  is  the  only  input  place  to  eacn  of  its  output 
transitions.  This  restriction  ensures  that  a  marking  for  p 
will  either  enable  all  of  its  output  transitions 
simultaneously*  or  will  enable  none  of  them.  With  this 
restriction*  it  is  now  possible  to  define  tne  brancnlng 
probabilities  for  the  output  transitions  of  a  free  choice 
place. 

Definition  3.8  The  branching  probability  for  a  free  choice 
place  p^  with  p^*  *  {t ,  *t2*. ..  ,t„>  is 
bcJ  *  p^tJ  ¥l11  flre  '  t,  ,tg*....t-  are  enabled] 
such  that: 

9  <b ij<  1 

and 

«  1  wnere  n  -  |P£»| 


We  make  the  assumption  that  these  prooablll ties  are 
functions  of  the  flrlne  distributions  for  tne  output 
transitions  only  and  In  particular,  that  they  are  constant 
and  Independent  of  the  marking. 

By  allowing  these  sources  of  nondeterminism,  the  system 
state  U  may  be  expressed  as  a  stochastic  process. 

Definition  3.9  Let  D('T),  the  system  state  of  a  petrl  net 
M ,  be  a  random  variable  and  a  function  of  time  where 

U (T)  «  [u,  (*D  tU2(T) . u*  (T)]  such  that  uj  (T)  =pv(p [)• 

U(  )  Is  a  discrete  state,  continuous  time  stochastic 
process  described  by  the  probability  distribution: 

tjk  3  p  [0(1*1 )  *  fJ*  j  •  0 (1j  )  3 flj  »  •  •  •  ,0(1j  )  3 f-Ln  ] 

jX |»  JLL ••  •  i  |Ll 0(M)  * 

U(T)  describes  the  manner  in  wnich  the  system  moves 
between  states  in  the  reachability  set.  It  should  be  noted 
that  the  distribution  tA  (fj.t’f)  Is  equivalent  to  expressing 
the  probability  that  some  feasible  firing  sequence  <y  exists 
such  that  .  Therefore,  it  is  possible  to  extend  tne 

definition  of  liveness. 

Definition  3.10  A  transition  t  €T  is  live  for  state  U 
iff 

Vo  3o;  Uj  %  A  p[<T,l>0  **> 

3  0  pCO**J  >0  A  €  S„ 


Theorem  3.1  For  a  live  stochastic  petrl  net  M  with  margin* 
and  initial  marking  fJ.0€Q(M), 
p [5(f)  >0 

Proof.  Assume  p[U(r)  =  8.  Tnen  tne  probability  tnat 

a  firin*  sequence  <J  ezists  sucn  tnat  Is  zero  In 

contradiction  with  tne  assumptions  of  Definition  3.10 
and  therefore  M  cannot  be  live. 

We  are  Interested  in  determining  tne  conditions  for  wnicn  U 
is  a  Markov  chain,  that  is,  when 

P )  *  M”n*/  ‘  •••• 

.atr.)  */xj  =  pto(r^  )  =(±ni,  !  U (T„)  -MJ* 

In  addition,  we  are  interested  in  determining  the 
stationary  (time  independent)  state  probabilities  if  tney 
exist.  We  first  consider  tne  case  of  state  machine 
decomposable  petrl  nets. 

C.  CLOSED  PETRI  NET  STSTEMS 

To  express  tne  system  state  transitions  as  a  Markov 
process  it  is  first  necessary  to  derive  expressions  for  the 
arrival  and  departure  processes  for  tne  places  in  the  net. 
This  may  be  accomplished  by  considering  the  net  as  a 

collection  of  nodes,  each  of  which  has  a  well-defined 

behavior,  and  in  particular,  for  wnicn  tne  arrival  and 

departure  processes  may  be  expressed  analytically. 
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A  node  In  a  petrl  net  is  defined  as: 

Definition  3.11  A  node  a  in  a  petrl  net  Is  a  subset  of  the 
set  {P|JT}  sucn  tnat 

Vt£  €  T  t£  €  n  <=*> 

Vpj  P;€  *t I  <=*>  Pj  €n 

A  VtK  <**>  tK€n 

Theorem  3.2  Tne  node  set  [nj  =  n,  ,  n2,...,nn  is  a 
partitioning  of  a  petrl  net  M. 

Proof.  1.)  yn4*  *{P(JT).  By  definition,  every  transition  t 
is  trivially  an  element  of  some  node  n*.  Assume  tnere 
exists  a  place  pj  such  that  pjj^(n;,  n^, ...  ,n<1|).  By  the 
definition  of  a  petrl  net,  pj  has  (at  least)  one  input 

transition  tj  .  Since  t£  is  an  element  of  some  node,  by 

Definition  3.11  p j  is  an  element  of  that  node, 
ii.)  Vn«  ,n^  £  [nj  n*  *  nb  v  n«.  fl  nb  =0 •  Assume  there 
exists  some  transition  t£€ln*.nhfc}.  Le t  pj  be  an  input 
place  to  t£  and  an  element  of  na.  Tnen  by  Definition 
3.11  p j  is  also  an  element  of  nb.  Now  let  t^  be  an 
output  transition  to  pj  and  an  element  of  nA.  A*ain  by 
definition  iK  is  also  an  element  of  nfc  and  tnerefore 
n*  »  nfc. 

Likewise,  assume  tnere  exists  some  place 
p j  *y  the  same  reasoning  sA  *  n*.  Tnerefore, 

tne  set  of  nodes  defines  a  partitioning  of  M.  QED. 
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Figure  3.2(a)  snows  tne  node  partitioning  of  an 
arbitrary  petrl  net.  Now  consider  tne  single 
place/transl tlon  node  n(.  Figure  3.2(b)  Is  tnls  node  witn  an 
arbitrary  marking.  Since  we  nave  assumed  tnat  tne  transition 
In  tnls  node  Is  firing  wnenever  enabled,  we  nave  tne 
important  result  that  this  node  is  equivalent  to  a  single 
server  queueing  system. 

The  marlring  for  p,  which  we  have  defined  as  tne  state 
element  u.  Includes  the  tokens  being  fired  or  waiting  to 
fire.  Two  features  of  tnls  representation  snould  be  noted. 
First,  all  tokens  are  identical;  no  token  classes  exist. 
Second,  no  queueing  discipline  Is  modeled  In  the  system. 
This  places  a  restriction  on  the  ability  to  derive  analytic 
solutions  for  the  system. 

To  describe  the  operation  of  tne  node,  tnat  is, 
determine  the  local  state  probabilities  PUJ(T)  =  u] ,  It  Is 
necessary  to  characterize  tne  arrival  and  departure 
processes.  It  is  well  known  tnat  the  exponential 
distribution  Is  tne  only  continuous  distribution  for  wnlch 
the  Markov  property  holds.  In  addition,  it  has  been  shown 
[33]  that  arbitrary  work  conserving  queueing  disciplines 
result  in  equilibrium  product  form  state  probability 
solutions  for  exponential  firings.  Therefore  we  assume  the 
firing  time  distribution  S(x)  to  be: 
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Definition  3.12  The  firing  time  distribution  for 


transition  t£  is  given  by 
S{  (x)  *  1  -  exp (— /jLjX ) 
wttere  tne  mean  firing  rate  is  /JLj;. 


Tbe  requirement  that  tne  queueing  discipline  be  work 
conserving  means  tnat  no  knowledge  of  tne  firing  time 
requirements  is  used  in  selecting  tokens  for  firing.  It  is 
clear  from  tne  indeterminate  nature  of  tne  tokens  in  petrl 
nets  that  this  is  Indeed  tne  case  and  therefore  ve  are 
Justified  in  asserting  that  tne  Markov  property  holds. 

Finally,  it  is  necessary  to  determine  tne  arrival 
process  for  tne  node.  In  tne  case  of  closed  networks  (and 
tne  petrl  nets  we  nave  considered  thus  far),  tne  arrivals 
are  made  up  of  departures  from  other  nodes  in  tne  net.  It  is 
assumed  that  upon  completion  of  firing,  the  tokens 
immediately  enter  tnelr  associated  output  places.  Tnerefore, 
the  arrival  process  may  be  characterized  as: 


Definition  3.13  Tne  arrival  rate 
given  by: 


A-2  r- 

J«l  i 


'Jt 


for  a  place 


where  £*•  is  the  arrival  rate  for  node  n j,  b jl  is 
branching  probability  tnat  a  departure  from  node 
arrives  at  node  nt*,  and  m  is  the  rank  of  [n] . 


is 


the 


DJ‘ 


*9 
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Note  taat  we  nave  not  specified  tne  arrival  distribution 
itself.  It  nas  been  snown  by  Burke's  theorem  (42J  and 
several  extensions  (for  example  [3J  ) ,  tnat  in  many  cases  tne 
arrival  process  is  asymptotically  Poisson. 

To  summarize*  ve  nave  made  tne  following  assumptions 
concernine  the  petri  net  state  transition  process: 

1.  Firing  times  are  independent. 

2.  Firing  times  are  continuous  and  exponentially 

distributed. 

3.  The  queueing  discipline  is  work  conserving. 

4.  Nondeterminlstlc  transitions  between  nodes  are 

determined  by  constant  branching  probabilities. 

5.  There  is  no  overhead  in  transition  firings* 
transitions  fire  whenever  enabled. 

In  Section  II  we  considered  the  class  of  state  machine 
decomposable  nets  and  state  machines.  Figure  3.3  is  an 
example  of  such  a  net  with  its  associated  nodes. 

Theorem  3.3  Each  node  in  a  state  machine  contains  exactly 
one  place. 

Proof.  By  definition*  each  transition  has  a  single  input 
place.  Trivially  then,  there  must  be  at  least  one  place 
in  each  node.  Without  loss  of  generality*  assume  there 
exists  a  node  with  two  places  p,  and  witn  tt-£p(#.  By 
implication*  pA#  and  therefore  p ln 


contradiction  witn  tne  definition  of  a  node.  Tnerefore, 
there  is  at  most  one  place  in  each  node.  QED. 

The  next  result  follows  immediately: 

Corollary  3.3.1  The  places  in  a  state  machine  are 
free-choice . 

Since  toe  places  are  free-choice,  it  is  possible  to 
assign  the  brancning  probabilities  to  the  output 
transitions.  These  transitions  are  not  multiple  servers, 
rather,  they  represent  the  possibility  for  tokens  vhlcn  must 
be  handled  differently.  It  is  necessary  therefore,  to  create 
composite  places  to  deal  with  this  requirement.  The 
resulting  net  we  call  the  stochastic  equivalent  petrl  net 
(SEN). 


Definition  3.14  The  stochastic  equivalent  net  for  a  petri 


net  M  is  constructed  as  follows: 


for  every  place  p  in  P,  assign  a  set  ItT,  *7Ta»  •  •  •  •7T,,} 
where  n  ®  |p^*j  »  VtK€T  I(TTj,tk)  =  Kp^.tj),  and  if 
Pi*  *  It,  ,ta,...,t*> 


0(7TjttK) 


0(pi , .  ,) 

0  otherwise 


la  the  associated  graph,  each  edge  from  a  transition  in  #p; 
to  the  set  (IT,  ,'TTa, . . .  ,*7£  >  is  Joined  by  an  arc  and  labeled 
with  tne  appropriate  branching  probability. 
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The  SEN  for  the  petri  net  In  Figure  3.3  Is  depicted  In 
Figure  3.4.  Eacn  node  In  tne  SEN  consists  of  a  single  place 
and  transition,  vitn  tne  branching  probabilities  occurring 
at  the  output  from  tne  transitions.  It  Is  clear  from  tne 

definition  that  the  SEN  has  the  same  properties  of 
boundedness,  llveness,  and  consistency  as  tne  associated 
petri  net. 

It  Is  now  possible  to  obtain  the  analytic  solution  for 
tne  petri  net  by  treating  Is  as  a  closed  queueing  network. 

Theorem  3.4  The  SEN  for  a  state  machine  with  a  live 
marling  Is  ergodlc. 

Proof.  By  theorem  2.12,  a  state  machine  Is  bounded  and 
therefore  tne  state  space  (reachability  set)  Is  finite. 
Lien  has  shown  [43,  thm  11 J  that  the  state  space  for 
this  class  is  strongly  connected.  Therefore,  the  state 
space  is  irreducible.  Since  It  Is  finite,  tne 
probability  of  reaching  some  state,  PUJ4],  is  greater 
than  zero.  Therefore  tne  state  space  Is  recurrent  and 
noa-null.  By  definition  therefore,  the  state  space  is 
ergodlc  and  likewise  the  SEN  Is  ergodlc. 

Thus,  equilibrium  state  probabilities  exist  for  tne  system? 
that  is, 

P[CJ  -  11m  P[U,rJ 
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This  type  of  system  was  solved  by  Gordon  and  Newell  [30 J .  At 
equilibrium,  tne  derivative  d/dT( P[U,TJ )  must  vanlsn  for 
each  state  In  tne  state  space.  Tnis  allows  tne  rlobal 
balance  equations  for  tne  system  to  be  written.  For  some 
state  ,  tne  rate  of  cnanee  of  probability  Is  determined  by 
the  rate  of  flow  of  probability  into  the  state  due  to 

arrivals  and  tne  rate  of  flow  of  probability  from  tne  state 
due  to  departures.  This  may  be  written  as: 

d/dT  (P[a,T)J  *  P[(u,  ,ua, . ..  .u*  J  )  “ 

a  *  *•*' 

2  2  O  ^  )  U»| lb  ij  •  P  l  (  U  j  »  U  2  ,  .  •  .  »U  :  “1  ,  .  .  .  ,  U  •  +1  ,  ...,u  )] 

4«l  j«i  '  *  J  ' 

-  0 


where  &(u{)  is  the  unit  step  function  given  by 


S(Ui ) 


0  If  u;  *  0 
1  otherwise 


These  equations  may  be  solved  directly  to  within  a  constant 


which  may  be  determined  by  addin*  the  requirement  tnat 

2  P[0- J  *  1 

IM 

The  product  form  solution  to  these  equations  is  [30 J 
P[DJ  *  P[(u  ,  ,ua . u„)J  *  tl/G<K)>  J!  T* 

4»l 

where  K  =*  N(0)  and  the  x^  are  solutions  to  equations 

*2  (1*X’2 . n)* 

The  normalization  constant  G( K)  Is  given  by 
G(K)  -  2  ft  x? 

U  c«4 

Algorithms  have  been  found  for  computing  G(K)  and  the  x* 
[42J. 
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D.  OPEN  PETRI  NBT  SYSTEMS 

Since  tne  SEN  for  a  state  machine  has  been  snown  to  be 
equivalent  to  closed  networks  of  queues,  tne  question  arises 
as  to  whether  petrl  nets  can  be  defined  which  are  analogous 
to  open  networks.  Sucn  a  system  may  model  tne  occurrence  of 
external  events  such  as  the  arrival  of  Interrupts. 
Alternatively,  tne  model  may  represent  a  communications 
system  where  messages  enter  and  are  removed  from  tne  system 
at  various  points.  To  Incorporate  tnese  external  events, 
Definition  2.1  may  be  extended  as  follows: 

Definition  3.15  An  open  marked  petrl  net  OM  Is  a  marked 

petrl  net  wnere 

V €  T  wtj  *  <p  <=>  t^  Is  a  source 

t{*  =  <f>  <=>  t;  is  a  sink 

It  Is  assumed  tnat  tnese  transitions  may  source  or  sink  an 
infinite  number  of  tokens.  The  firing  rates  are  defined 
as  before  except  that  yc  is  the  mean  arrival  rate  for 

source  tt* . 

The  possibility  of  external  arrivals  requires  a 
modification  of  tne  earlier  arrival  process  definition. 

Definition  3.16  The  arrival  rate  f*.  for  a  node  is  «iven  by 

r.-x-2rj<’j. 

j»i  J 

It  can  be  seen  that  Definition  3.13  is  a  special  case 
wnere  '^•8  for  1  *  1,2,.  ..,n. 
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Several  observations  can  be  made  concerning  tne  ways  in 
wnicn  the  properties  of  liveness,  boundedness,  and 
consistency  are  affected  by  tne  addition  of  sources  and 
sinks.  First,  consider  tne  case  of  marked  graphs.  Recall 
that  for  a  marked  graph,  eacn  place  is  conflict  free.  Figure 
3.5(a)  shows  part  of  a  marked  graph.  To  meet  the  conflict 
free  requirement,  source  and  sink  transitions  can  be  added 
to  the  net  only  at  existing  transitions  (with  intervening 
places  being  added).  In  Figure  3.5(b),  a  source  transition 
stl  has  been  aided  at  transition  tg  and  in  Figure  3.5(c),  a 
sink  transition  st2  has  been  added  at  transition  t^. 

Theorem  3.5  Liveness  in  marked  grapns  is  unaffected  by  tne 
addition  of  source  or  sink  transitions. 

Proof.  By  definition,  a  source  transition  is  live,  and 
therefore  liveness  is  unaffected  by  the  addition  of  a 
source.  Now  consider  a  transition  in  tne  net  t,;  witn  a 
sink  transition/place  pair  added  to  the  output.  If  t^  is 
live,  it  can  be  fired  by  some  sequence  which  will  then 
enable  the  sink  transition*  therefore,  tne  sink 
transition  is  live  and  liveness  is  conserved. 

Tneorem  3.6  A  marked  grapn  remains  bounded  after  addition 
of  source  and  sink  transitions  except  in  the  places 
associated  with  those  transitions. 
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Figure  3.5  Addition  of  source  and  sink  transitions  to  petrl  nets, 
(a)  marked  eraph.  (b)  marked  graph  with  source  stl.  (c)  marked 
grapn  with  sink  st2.  (d)  state  macnlne  net  wltn  sources  and  sines 
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THIS  result  is  clearly  true  by  tbe  definition  of  transition 
firing.  It  snoull  be  noted  tnat  the  general  results  of 
queueing  theory  require  that  the  places  associated  with  the 
source  and  sink  transitions  be  unbounded  (If  exponential 
arrivals  and  departures  are  assumed). 

In  terms  of  the  dynamic  operation  of  marked  graphs,  It 
can  be  seen  from  Figure  3.5  tnat  the  existence  of  sink 
transitions  has  no  effect.  The  source  transitions  operate  by 
controlling  the  enabling  of  the  net  transitions  to  which 
they  are  connected;  tney  set  an  upper  bound  on  tne  firing 
rate  of  the  transition. 

In  tne  case  of  state  macnines,  tne  source  and  sink 
transitions  are  added  to  existing  places  In  the  net  (see 
Figure  3.5(d)).  Tne  nondeterministi c  nature  of  state 
machines  results  in  changes  to  the  properties  of  the  net 
after  tne  Addition  of  tne  sources  and  sinks.  For  example.  If 
•a  sink  transition  is  aided  to  a  live  state  machine,  tne  net 
could  eventually  terminate  since  the  sink  must  eventually 
become  er.ab.*ti  resulting  In  tne  loss  of  a  token  to  tne 
system.  W-en  sources  are  added,  the  net  will  become  become 
unfounded.  Since  tne  source  can  be  fired  arbitrarily  often, 
the  token  count  of  tne  output  place  to  tne  source  can  become 
arblt  art iy  large  . 

By  generalizing  the  closed  network  queueing  model 
developed  In  tne  previous  section,  tne  solution  for  state 
machines  with  sonrces  and  sinks  may  be  obtained.  Once  again, 
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the  net  is  transformed  into  Its  stocbastlc  equivalent,  A 
sink  Is  added  to  a  node  J  by  adjusting  tne  branching 
probabilities  of  tne  transitions  In  j  so  that  the 


probability  of  departure  from  tne  system  at  node  J,  P[d  J, 
obeys: 

P[d]  ■  1  -  £  b:4'  where  n  Is  It^l. 

C»l  •  » 

A  source  is  added  to  node  J  by  Inserting  an  ed*e  directed 
Into  the  place  In  J  and  labeled  with  the  mean  arrival  rate. 

Since  It  Is  possible  for  the  net  to  become  unbounded 
after  adding  sources  and  sinks.  It  Is  necessary  to  require 
that  fj  <  fJij  for  every  node  in  the  SEN  to  ensure  that  the 
net  remains  ergodlc. 

Once  aealn,  the  solution  Involves  writing  tne  global 
balance  equations  for  the  system,  l.e.: 

Vl fj  £  P[Ht* J  (rate  of  flow  from  0^  Into  Uj  ) 

*  P[Uy]  (rate  of  flow  out  of  Uj  ) 

Basket  [32 J  has  snown  that  the  general  product  form  solution 
for  this  system  Is  of  the  form 

P[0]  -  Cd( 0 )f ,  (u,)f2(ua)...fn(un) 

where  C  Is  the  normalization  constant  needed  to  ensure 

Z  J  *  1  . 

L*  I 

d(tJ)  Is  an  expression  for  the  exogenous  arrival 
d(0)  mZyt  for  Poisson  arrivals  at  constant  rate'y,;, 


rate. 


and  f^(ut)  Is  a  function  of  tne  queue  discipline. 

For  FCFS,,f£<Ui)  -  1/fj,-  ft  f.  »(JL) 

w  '  \V-iJ 

g.  CONSISTENT  PETRI  NET  SISTEMS 

Tne  nost  general  petrl  net  class  we  consider  Is  tnat  of 
lire,  bounded,  and  consistent  nets.  Tne  solution  to  tnis 
class  proceeds  Identically  to  tnat  used  earlier.  Tne  net  Is 
first  transformed  Into  Its  stocnastlc  equivalent  net  form  by 
tne  metaod  of  Definition  3.13.  Figure  3.6(a)  snows  bow  an 
arbitrary  node  in  tne  petrl  net  is  transformed.  Note  tnat  In 
the  resulting  node  12,  two  places  are  required  as  input  to 
transition  t^  and  taerefore  tnis  node  does  not  model  tne 
simple  queue/server  pair  wnicn  was  seen  earlier  for  state 
macnines.  Anotner  possibility  for  a  SEN  node  is  tnat  tne 

transition  nas  multiple  outputs  wltn  branching  probabilities 
b£j  all  equal  to  1.  Tnese  two  situations  are  shown  In  Figure 

3.6(b).  It  nas  been  shown  {44]  that  these  types  of  nodes 
(also  referred  to  as  Join  and  forte  nodes)  do  not  satisfy 
local  balance  and  therefore  product  form  solutions  do  not 
exist  for  tnis  class  of  nets.  However,  since  the  net  is 
bounded,  by  tne  results  of  Cnapter  II  tne  reachability  set 
(and  state  space)  Is  finite  and  therefore  the  global  state 
equations  can  be  solved  numerically  [45J . 

In  the  case  of  consistent  nets  wltn  sources  and  sings. 
It  Is  possible  for  the  net  to  become  unbounded  since  the 
sources  may  fire  arbitrarily  often  and  therefore  finding  tne 
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solution  to  tne  global  balance  equations  becomes 
Intractable.  In  tnis  case,  approximation  tecnnlques  sucn  as 
aggregation  or  the  diffusion  approximation  146]  must  be 
resorted  to.  Tne  applicability  of  tnese  tecnnlques  to  petrl 
nets  is  an  open  question,  but  one  which  has  the  potential  to 
extend  the  modeling  power  of  petrl  nets  to  more  Interesting 
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IV.  CONCLUSIONS 


This  tnesis  has  addressed  tne  problem  of  computer  system 
performance  analysis  through  the  use  of  the  petri  net  model. 
The  model  has  wide  applicability  to  tne  analysis  of  both 
hardware  and  software  systems,  particularly  those  which 
exhibit  concurrency  or  asynchronous  operation.  Due  to  tne 
power  of  the  petri  net  approach,  it  is  necessary  to  restrict 
the  structure  of  the  nets  resulting  in  a  hierarchical  class 
relationship  between  petri  net  types. 

The  classes  of  greatest  interest  in  system  modeling  are 
marked  graphs,  state  machines,  and  consistent  nets.  All 
three  of  these  classes  were  shown  to  have  the  properties  of 
boundedness,  liveness,  and  consistency  which  are  useful  in 
the  verificatloh  of  computer  system  correctness.  Of  tne 
three  classes,  the  class  of  consistent  nets  is  the  most 
useful  in  modeling  in  tnat  it  can  represent  the  greatest 
ranee  of  possible  systems  —  and  is  also  the  most  difficult 
to  analyze  mathematically . 

It  was  seen  that  the  general  problem  of  reachability, 
and  the  set  of  states  in  which  a  marked  petri  net  could 
enter,  was  a  primary  consideration  in  the  analysis  of  tne 
nets.  In  particular,  an  algorithm  was  presented  for 
determining  tie  state  space  for  the  class  of  bounded  petri 
nets. 
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By  defining  the  fir In*  times  for  the  transitions  in  the 
net*  it  was  possible  to  extend  tne  analysis  of  petrl  nets  to 
their  dynamic  execution.  Random  firing  times  allowed  tne 
nets  to  model  data  dependent  events.  This  concept  led  to  the 
Identification  of  nondeterminism  In  the  petrl  net  execution. 

Petri  nets  with  random  firing  times  were  shown  to  be 
analogous  to  closed  queueing  networks.  A  major  difficulty  in 
this  approach  is  the  Inability  to  model  queueing  disciplines 
In  the  places.  However*  If  exponential  firing  is  assumed, 
the  analysis  can  be  conducted  without  detailed  knowledge  of 
the  structure  of  the  queue.  In  this  context*  the  stochastic 
equivalent  net  was  introduced  as  a  metnod  for  demonstrating 
the  correspondence  between  petrl  nets  and  queueing  networks. 
This  permitted  tne  state  probabilities  to  be  determined 
through  the  known  techniques  of  queueing  theory. 

The  definition  of  petrl  nets  was  extended  to  allow  for 
events  which  take  place  external  to  tne  system  itself. 
Again,  the  resulting  stochastic  equivalent  net  corresponds 
to  a  queueing  network  —  in  tnis  case  tne  open  network 
model . 

It  appears  tnat  tnis  approacn  to  petrl  net  modeling  can 
utilize  more  of  the  recent  results  of  queueing  network 
theory,  for  example,  solutions  nave  been  found  for  state 
dependent  routing  (branching)  probabilities,  and  state 
dependent  arrival  and  departure  rates.  Additional  work  Is 
required  to  determine  If  tne  use  of  petrl  net  based 
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stochastic  models  simplifies  the  problem  of  reducing  system 
design  criteria  and  parameters  to  a  form  vnlcn  permits  tne 
application  of  queueing  network  techniques. 
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APPENDIX  A 


LIST  OF  NOTATION 


probability  tbat  transition  J  will  fire  eiven 

tnat  place  1  enables  transitions  t|(t2,...,tn 
Cj  input  incidence  matrix  for  a  petri  net 

Cd  output  incidence  matrix  for  a  petri  net 

E(t^ftj)  the  set  of  edges  in  a  marked  rraph  between 
transitions  1  and  j 

<&<  t)  a  current  assignment  for  a  transition  in  a 

consistent  net 

T(0#t)  the  firing  function  for  a  transition  t  and 
state  0  in  a  petri  net 

r 'i  the  total  mean  arrival  rate  at  node  i 

I(p,t)  the  input  function  for  place  p  and  transition  t 

M  a  marked  petri  net  <P,T,I  »0,ju> 

M *  a  marked  graph  <T',E '  ,/X> 

jj.(p)  tne  marking  function  for  a  marked  petri  net 

(section  2) 

the  mean  firing  rate  for  transition  i  (sec  3) 

N  a  petri  net  <P,T*I,0> 

N (P )  the  token  count  for  a  set  of  places  P 

0(p,t)  the  output  function  for  place  p  and  transition  t 

P  the  set  of  places  in  a  petri  net 

77  a  composite  place  in  a  stochastic  equivalent  net 
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CL  b 


0 ( M )  tne  reacnability  set  (space  state)  for 

petrl  net  M 

R(F)  tne  reacnability  set  for  a  vector  addition 

system  F 

tlie  computation  rate  for  a  discrete  time  petrl  net 
a  firing  sequence  ( t,  ,  tzf . . . , t„ ) 

SK  tne  enabling  set  1 1,  ,  ta, . . . ,  t*}  enabled  by 

marking  fJ.K 

Six)  the  transition  firing  time  distribution 

s(x)  tne  transition  firing  time  density  fuction 

T  the  set  of  transitions  in  a  petrl  net 

9t-  tne  state  of  a  petrl  net  (u,  ,u4, . . .  ,u„)  with 

marking 

?  a  vector  addition  system  <dfW> 

W  the  vector  set  in  a  vector  addition  system 
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